$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: 8CWvBuKmII9Lj5a+g9pJQW01m12UBazYSHPztWsRSGo= Subject key identifier: 76:78:20:E7:9A:D7:4E:43:E2:B7:A3:B2:83:5F:1F:04:97:12:80:59 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 017D Signing time: Fri 19 Sep 2025 04:13:11 +0000 Manifest this update: Fri 19 Sep 2025 04:13:11 +0000 Manifest next update: Fri 26 Sep 2025 04:13:11 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: Y6HQC6x3cWvn7M3QwwApIrdAUYkRNnUTTtQpix2+mSw=) 2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Sep 19 04:13:11 2025 GMT Not After : Sep 26 04:13:11 2025 GMT Subject: CN=68ccd857-3f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:fd:fd:c2:39:1b:d6:1b:a8:05:a1:a4:e5: 22:30:ae:1a:07:a3:cc:6e:54:83:78:7c:5b:41:de: 37:8f:49:01:ac:21:9e:4d:5c:3b:14:39:b6:fe:04: ee:89:57:1a:ef:4b:16:78:9c:14:ff:17:5b:51:02: 75:4d:24:50:e3:f7:e7:80:10:57:31:ab:98:3d:17: 30:fb:68:73:bc:a3:2f:77:69:d7:6b:08:da:6d:56: c6:8c:df:ad:4f:33:46:e3:c6:b6:b9:b1:ac:fe:46: a9:c2:cc:9c:4d:2a:5a:e3:a1:09:f8:bd:e6:b0:44: a8:8b:e7:1f:b5:bf:49:43:a3:8d:96:70:7b:01:90: de:d1:05:fd:05:a9:54:c3:22:4a:68:84:d7:38:c1: 46:e1:46:ec:70:63:11:16:73:38:50:e3:7f:30:f5: 09:15:a6:66:95:e7:8d:46:65:a6:73:60:c2:7f:a4: 1c:67:16:e2:48:92:17:16:17:58:0a:4d:4a:11:f2: 72:f4:46:b6:05:d6:36:28:ed:a2:a0:5f:04:b1:5d: 0b:b3:08:46:63:1c:49:c6:a2:5a:d8:e0:59:79:e2: bd:15:97:04:79:e5:ed:94:23:38:ca:ee:9e:2f:3f: 45:61:48:39:14:33:95:c2:27:3e:28:5a:41:4d:ed: f9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:78:20:E7:9A:D7:4E:43:E2:B7:A3:B2:83:5F:1F:04:97:12:80:59 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c1:6f:b6:c3:70:75:09:cf:0e:68:cc:a5:70:9e:30:e5:a3: 43:3f:35:3f:99:de:9d:fd:83:cd:0c:da:d0:b2:38:8f:fd:ec: 42:8d:3a:2c:51:56:ed:93:39:17:cc:06:6a:68:cc:63:0d:cb: 01:e5:7a:75:a2:6b:2b:10:f2:f6:8c:4d:df:cc:1c:25:a2:45: e3:51:21:17:35:1a:0f:92:67:a3:a0:8c:62:64:d3:4c:79:27: 8a:0b:9b:c8:9d:78:05:dd:5c:a2:13:9f:e0:d1:0d:90:5a:89: a4:e3:aa:a9:35:be:84:c3:c4:ef:66:15:af:1c:5d:94:0b:69: 51:80:17:e7:1c:c6:ed:28:3b:cb:4c:02:38:76:68:d6:47:68: 4c:a0:13:60:8d:3a:3b:0d:b7:37:33:8e:b5:cb:0d:c7:62:1d: c1:f5:68:82:37:44:d7:f4:d4:f8:5f:89:84:26:23:07:bd:fe: 56:06:b8:fb:77:49:45:b8:29:69:cd:da:97:33:94:1b:2b:de: 08:fc:70:a3:c6:dd:f1:5b:ab:f7:10:c2:42:63:62:6d:a5:fa: ee:1d:2c:21:75:03:3c:d1:40:57:ee:83:6a:11:73:db:54:99: 12:a5:9a:d6:b5:c4:44:aa:db:f6:70:4a:cd:32:57:5b:40:9d: dc:4b:2a:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUwOTE5MDQxMzExWhcNMjUwOTI2MDQxMzExWjAYMRYwFAYD VQQDEw02OGNjZDg1Ny0zZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wD9/cI5G9YbqAWhpOUiMK4aB6PMblSDeHxbQd43j0kBrCGeTVw7FDm2/gTu iVca70sWeJwU/xdbUQJ1TSRQ4/fngBBXMauYPRcw+2hzvKMvd2nXawjabVbGjN+t TzNG48a2ubGs/kapwsycTSpa46EJ+L3msESoi+cftb9JQ6ONlnB7AZDe0QX9BalU wyJKaITXOMFG4UbscGMRFnM4UON/MPUJFaZmleeNRmWmc2DCf6QcZxbiSJIXFhdY Ck1KEfJy9Ea2BdY2KO2ioF8EsV0LswhGYxxJxqJa2OBZeeK9FZcEeeXtlCM4yu6e Lz9FYUg5FDOVwic+KFpBTe358QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZ4IOea 105D4rejsoNfHwSXEoBZMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASwW+2w3B1Cc8OaMylcJ4w5aNDPzU/md6d/YPNDNrQsjiP/exCjTos UVbtkzkXzAZqaMxjDcsB5Xp1omsrEPL2jE3fzBwlokXjUSEXNRoPkmejoIxiZNNM eSeKC5vInXgF3VyiE5/g0Q2QWomk46qpNb6Ew8TvZhWvHF2UC2lRgBfnHMbtKDvL TAI4dmjWR2hMoBNgjTo7Dbc3M461yw3HYh3B9WiCN0TX9NT4X4mEJiMHvf5WBrj7 d0lFuClpzdqXM5QbK94I/HCjxt3xW6v3EMJCY2JtpfruHSwhdQM80UBX7oNqEXPb VJkSpZrWtcREqtv2cErNMldbQJ3cSyrq -----END CERTIFICATE-----Generated at Fri Sep 19 19:11:51 2025 by rpki-client